Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/38302e39312e3231382e302f32342d3234203d3e203231383430.roa
File:                     38302e39312e3231382e302f32342d3234203d3e203231383430.roa (raw, json)
Hash identifier:          ZpMaoRfJhegokg2kMpXKgtPigurpaI/m9MRVqXgj5b4=
Subject key identifier:   BE:56:0E:E5:08:41:78:CC:2A:62:8D:3C:B7:03:3D:F7:DE:6D:5B:76
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       3268D8F4AFA6A51FCFB4C9759EA8E13B7D174F3E
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/38302e39312e3231382e302f32342d3234203d3e203231383430.roa
Signing time:             Wed 23 Apr 2025 05:39:18 +0000
ROA not before:           Wed 23 Apr 2025 05:34:18 +0000
ROA not after:            Wed 22 Apr 2026 05:39:18 +0000
asID:                     21840
IP address blocks:        80.91.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:68:d8:f4:af:a6:a5:1f:cf:b4:c9:75:9e:a8:e1:3b:7d:17:4f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Apr 23 05:34:18 2025 GMT
            Not After : Apr 22 05:39:18 2026 GMT
        Subject: CN=BE560EE5084178CC2A628D3CB7033DF7DE6D5B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:be:44:ed:49:c0:27:d9:23:c8:99:5f:e2:78:
                    de:b4:e2:60:f6:44:84:20:c8:6b:fc:9c:83:c6:7f:
                    8c:85:cb:79:88:9e:d1:61:14:92:83:a1:ee:08:87:
                    88:21:81:d5:08:6c:97:40:69:35:ed:39:3c:1d:71:
                    76:22:ad:e7:10:06:9d:b7:35:28:6c:8d:85:2e:3a:
                    d8:a8:a0:dd:c4:8e:ae:0b:17:04:0d:78:bf:25:66:
                    27:34:f4:7d:38:f4:57:27:f0:32:b7:5f:99:69:f6:
                    77:c2:e0:ac:06:70:64:c9:78:1e:ed:ec:c4:a5:a1:
                    69:b1:3a:c4:96:f2:0c:fa:07:42:fe:db:00:3d:9e:
                    f7:25:33:60:4d:e5:ee:28:b5:0c:11:51:19:f7:c4:
                    35:43:5d:8a:b3:d3:d8:ed:08:7c:45:ac:77:5b:bf:
                    39:25:f9:76:39:d0:c1:c6:56:05:d3:1b:d0:e0:b1:
                    3c:f2:e8:1a:ac:72:86:ff:e6:03:a5:ed:97:b0:5c:
                    0f:4f:46:e1:18:00:81:ec:c4:3a:f7:94:5d:43:63:
                    c7:dc:18:bd:1a:b0:d6:e6:d9:84:41:01:ce:7d:19:
                    c8:f6:2c:a3:47:1b:90:d3:9b:59:15:d4:15:2d:1a:
                    51:78:8d:0b:36:ab:71:0c:c6:31:0a:30:33:04:7c:
                    db:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:56:0E:E5:08:41:78:CC:2A:62:8D:3C:B7:03:3D:F7:DE:6D:5B:76
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/38302e39312e3231382e302f32342d3234203d3e203231383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.91.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9d:6b:e3:49:cf:af:53:cd:7c:0d:db:af:fe:a4:0c:9b:33:
         b3:a5:48:f3:18:65:d3:a7:bd:52:a1:f9:b2:cc:38:03:7f:84:
         05:e1:b8:e9:b8:57:1b:f3:70:68:f4:66:71:56:0a:0d:02:da:
         e9:72:67:9a:4b:4c:fe:2d:b6:37:25:91:b1:d1:14:e4:b4:9c:
         07:8c:80:e2:2d:4c:3a:31:dc:d3:d5:9e:c8:df:29:2e:01:42:
         c7:57:04:60:dd:8e:61:65:67:86:72:78:dd:6e:4e:b6:e3:43:
         f3:cd:dc:f2:09:24:be:da:4b:3e:5a:46:47:c1:20:ff:2c:99:
         44:50:b5:90:6d:3a:15:0b:69:46:50:38:7f:a1:6d:5f:c4:dd:
         c0:88:7d:86:8f:0f:c0:9c:64:cc:55:be:93:04:0b:b5:94:9b:
         dd:bd:1f:93:f9:0a:3d:ac:27:b0:59:8b:0d:12:8b:16:05:5d:
         da:27:50:aa:93:82:57:8e:b0:c9:c3:f6:19:1a:6d:8a:ab:84:
         cf:60:9c:6f:69:56:68:6d:95:fd:2a:d7:bd:de:0b:1e:2b:d9:
         c4:0a:fa:77:6e:1f:75:99:5d:e6:38:90:8e:81:53:50:27:d9:
         9a:3d:74:df:9a:d2:7a:1d:e5:d2:64:d1:45:3b:21:5e:48:15:
         64:34:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:25:40 2025 by rpki-client